This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json) Hash identifier: QqvXJB5Jvu+xmSblnpIvPems02IRw16N4dsxR+txmcw= Subject key identifier: D6:61:03:D3:C9:C2:99:ED:86:45:E1:D2:9B:E5:3C:65:44:DD:73:61 Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Certificate serial: 019B52CE9CFCB81E680AB8A4753572C83D68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 00:00:30 +0000 Manifest this update: Thu 25 Dec 2025 00:00:30 +0000 Manifest next update: Fri 26 Dec 2025 00:00:30 +0000 Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=) 2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: ih6Z7LDHBR4nZlJlN+/YQM6vabpvkezqynym1OSfEU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:9c:fc:b8:1e:68:0a:b8:a4:75:35:72:c8:3d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Validity Not Before: Dec 25 00:00:30 2025 GMT Not After : Dec 26 00:00:30 2025 GMT Subject: CN=d66103d3c9c299ed8645e1d29be53c6544dd7361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:d9:76:70:b9:77:76:d3:03:76:6d:83:df: f5:bf:9a:0d:8b:b1:78:0f:d0:2a:46:c8:bd:26:18: 7e:75:42:c7:e5:f9:8b:7e:ab:c4:36:b8:27:de:7c: 7a:6f:99:7c:00:07:fe:97:4c:9c:e8:0a:78:88:3a: 1c:cc:25:81:c5:43:e1:1d:51:2e:20:f3:b5:bd:13: 5b:c4:19:e4:02:20:e0:62:5d:aa:cb:91:f3:2d:00: d0:18:50:b9:dd:39:b0:8d:19:7b:38:d5:48:a2:9a: b4:c2:f2:e8:46:f7:30:16:55:72:77:61:87:50:b9: c4:87:6a:d4:a6:24:f3:04:36:72:77:6a:aa:dc:ed: fb:e2:c6:56:49:90:3d:3a:08:27:b4:78:87:9e:9c: 7c:bf:fc:cf:3b:2c:f0:af:b5:b9:78:43:6a:15:f9: ae:97:ca:46:f0:e6:22:4a:d4:3f:ca:70:a8:c5:05: bc:80:88:ea:49:ef:10:5d:9e:fb:cc:2c:de:47:db: 83:50:29:c8:da:13:6d:dc:51:67:22:3c:8f:9e:93: 71:5f:50:c4:c3:3f:83:be:d4:1a:08:d3:1b:15:b6: 91:69:ad:59:dd:af:e4:bd:d6:6b:8c:45:15:b9:ec: 45:c5:6d:98:3c:ef:2c:84:32:80:73:e0:e7:dc:65: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:61:03:D3:C9:C2:99:ED:86:45:E1:D2:9B:E5:3C:65:44:DD:73:61 X509v3 Authority Key Identifier: keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c2:9c:b0:6a:d4:85:4c:9e:48:48:83:51:f7:f2:8c:70:28: 14:1e:63:57:28:84:45:18:d0:b1:14:b4:5a:d4:50:36:1d:b0: 0b:6b:8a:20:f2:eb:a7:12:ac:ac:43:a2:57:c7:6b:2a:f8:19: b6:e1:63:d2:3f:22:78:31:20:d0:91:fc:0b:c8:ea:fb:3a:27: a6:68:ef:75:b9:44:ce:14:a3:4c:08:fb:0e:f6:5f:e5:22:dc: 47:33:63:44:d4:19:bf:f5:dd:8d:36:85:7b:11:67:99:35:73: 17:d3:ee:f1:6d:a8:ce:08:23:d2:d1:01:c7:c5:0a:2a:3a:a7: 40:37:34:75:07:7a:3b:d7:da:8d:49:4e:3e:57:a6:86:03:ac: dc:45:4b:d3:bf:d9:ba:e8:bc:6c:dc:e8:3d:a5:8d:35:6b:2e: ae:05:d3:be:cb:1d:65:26:fe:9a:1a:fe:2f:ba:82:9f:bf:2e: 03:54:91:1d:b4:1a:63:b9:18:e6:a6:69:9e:78:d7:3a:7b:a5: 50:9c:de:19:7f:30:52:ba:cf:f8:99:05:4c:a2:3f:b6:f6:78: 81:9a:4c:69:b8:bc:30:b3:5f:17:19:49:58:3d:f1:4d:7c:08: f3:70:00:62:e9:1b:5b:be:17:1c:6c:5d:60:26:1d:d2:0c:54: f4:39:f4:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzpz8uB5oCrikdTVyyD1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj YjZmZGUwHhcNMjUxMjI1MDAwMDMwWhcNMjUxMjI2MDAwMDMwWjAzMTEwLwYDVQQD EyhkNjYxMDNkM2M5YzI5OWVkODY0NWUxZDI5YmU1M2M2NTQ0ZGQ3MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTnZdnC5d3bTA3Ztg9/1v5oNi7F4 D9AqRsi9Jhh+dULH5fmLfqvENrgn3nx6b5l8AAf+l0yc6Ap4iDoczCWBxUPhHVEu IPO1vRNbxBnkAiDgYl2qy5HzLQDQGFC53TmwjRl7ONVIopq0wvLoRvcwFlVyd2GH ULnEh2rUpiTzBDZyd2qq3O374sZWSZA9OggntHiHnpx8v/zPOyzwr7W5eENqFfmu l8pG8OYiStQ/ynCoxQW8gIjqSe8QXZ77zCzeR9uDUCnI2hNt3FFnIjyPnpNxX1DE wz+DvtQaCNMbFbaRaa1Z3a/kvdZrjEUVuexFxW2YPO8shDKAc+Dn3GXMYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZhA9PJwpnthkXh0pvlPGVE3XNhMB8GA1UdIwQY MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0 LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcKcsGrU hUyeSEiDUffyjHAoFB5jVyiERRjQsRS0WtRQNh2wC2uKIPLrpxKsrEOiV8drKvgZ tuFj0j8ieDEg0JH8C8jq+zonpmjvdblEzhSjTAj7DvZf5SLcRzNjRNQZv/XdjTaF exFnmTVzF9Pu8W2ozggj0tEBx8UKKjqnQDc0dQd6O9fajUlOPlemhgOs3EVL07/Z uui8bNzoPaWNNWsurgXTvssdZSb+mhr+L7qCn78uA1SRHbQaY7kY5qZpnnjXOnul UJzeGX8wUrrP+JkFTKI/tvZ4gZpMabi8MLNfFxlJWD3xTXwI83AAYukbW74XHGxd YCYd0gxU9Dn0eA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:21:52 2025 by rpki-client